Attribute MS-CHAP-Error

Alan DeKok aland at deployingradius.com
Tue Jan 21 19:17:41 CET 2014


nicolas.clo at ricoh-industrie.fr wrote:
> In Freeradius 3 , if a user must change his password, the
> Module-Failure-Message return nothing (it doesn't yet  exist )
> Maybe it's with the new support of Change password in module mschap ??!

  It should work.  What does the debug log say?

> In log below, attribute doesn't yet exist when I try to catch him
>  
> (16)   log_mschap_error log_mschap_error {
> (16)    ? if (MS-CHAP-Error =~ /.*Password expired.*/i)
> (16) *ERROR: Failed retrieving values required to evaluate condition*

  OK... MS-CHAP-Error doesn't exist.

> (16) eap_peap : Got tunneled reply code 3
> *        MS-CHAP-Error = '\tE=648 R=0 C=6833f9aa49b2f6bcc7dd53241f906cc7
> V=3 M=Password Expired'*

  Note "reply".

  What is the syntax to refer to an attribute in the reply list?  See
"man unlang".  Hint: it's not MS-CHAP-Reply.

  Alan DeKok.


More information about the Freeradius-Users mailing list